CVE-2017-12129
HIGH 8.0EPSS 0.6%
An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them.
- Affected
- Talos · Moxa
- CVSS v3.1 NVD
- 8.0 HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.0 CISCO
- 3.5 LOW
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS v2.0 NVD
- 2.9 LOW
AV:A/AC:M/Au:N/C:P/I:N/A:N - EPSS
- 0.64% chance of exploitation in the next 30 days, 50th percentile
- Published
- 2018-05-14
- Updated
- 2024-09-17